$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: sak2tsChBuLo5YnrZBuODQUaoqZu0pvWM3T9GX6QeOA= Subject key identifier: A5:E1:4F:15:6A:D9:7D:DA:F9:B5:92:2B:9A:E5:AD:26:9E:9C:6B:A5 Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 06AA Signing time: Tue 04 Nov 2025 22:35:10 +0000 Manifest this update: Tue 04 Nov 2025 22:35:09 +0000 Manifest next update: Tue 11 Nov 2025 22:35:09 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: xwOPyfOw2KjMOV6E7YTrVGJ0W3ySGMPuhblmhWYLm/o=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: NHTAsdosSc1dJObk2/ziQAWfZHiguqT3sc8AFW3nWA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: Nov 4 22:35:09 2025 GMT Not After : Nov 11 22:35:09 2025 GMT Subject: CN=690a7f9e-e109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:7a:53:46:b3:4c:fb:10:c6:51:a6:4b:55: e6:4d:88:4e:eb:69:ab:16:56:6b:e9:d4:a5:0c:36: ee:4e:a4:7e:82:b3:8e:42:cf:76:95:f2:81:19:b5: 53:c3:5b:b7:5c:2c:5e:d4:f9:d3:9b:6a:da:99:14: 97:ba:f5:13:89:13:8d:70:86:36:97:09:fc:2b:c7: a0:cf:93:72:33:dc:2e:21:4d:23:8e:fd:34:c9:9c: a7:0d:5e:77:18:11:3e:d6:ca:8c:7c:41:fb:e8:c6: ee:1c:09:ed:62:fb:c3:ad:08:67:bb:fc:ce:d2:73: dc:51:9d:f7:65:0e:f0:24:92:12:e6:c9:c2:c7:0a: 26:de:83:5f:bb:62:eb:7f:d8:b6:41:58:e3:7e:be: 59:70:89:86:8d:33:d5:8b:7c:2d:ce:4c:c9:b5:70: f1:f8:ee:d1:c5:40:96:1d:2f:59:01:52:51:a7:97: a0:7a:da:a1:d1:3d:d6:0b:fa:15:12:69:08:06:4a: 2c:5e:9a:32:d9:69:fe:2f:f7:9f:aa:64:05:37:6d: 03:88:b5:a7:7a:0b:d0:34:68:39:0d:29:e3:ff:3e: fe:29:db:00:96:bd:00:b6:1b:1d:f7:87:dc:a2:b6: e7:63:3b:3c:b5:78:f8:31:23:34:4f:7a:4b:f1:9a: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E1:4F:15:6A:D9:7D:DA:F9:B5:92:2B:9A:E5:AD:26:9E:9C:6B:A5 X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8f:55:18:da:c1:16:bf:fe:5d:e3:c1:bf:22:81:85:d5:97: 66:7c:67:d3:d1:a2:06:61:ea:53:99:c4:9e:be:91:9b:39:46: af:ec:e4:d2:54:2a:1a:59:35:7b:e6:ad:a5:ca:e1:8e:73:79: cf:b6:4b:e9:95:a7:9d:af:ed:d9:61:32:fc:ea:84:e1:37:8e: a7:3b:fb:7b:92:ce:10:a7:08:07:cf:21:0b:9f:64:d0:a0:61: 11:b2:24:a6:be:6f:5f:f2:f2:c9:93:fb:ce:30:f2:85:db:e5: ba:b1:b4:84:7f:33:fc:38:c9:c2:05:8d:54:49:ae:f9:51:bf: a6:a4:91:c8:52:d3:d7:e2:75:bc:d7:9a:3b:18:b7:2c:97:a9: c3:9e:e0:54:a2:52:fa:4e:a6:bb:89:56:56:0c:3e:b4:1f:1e: 87:de:cc:c3:75:06:ad:1e:69:f6:82:40:94:98:96:40:3a:bc: 0c:de:65:bf:32:eb:92:54:e3:13:15:95:10:23:94:28:4a:c8: ae:f4:54:0c:ae:15:06:29:6e:33:a8:a4:45:d5:81:03:5d:b9: 2c:97:8c:7e:60:66:ba:15:22:cc:dc:36:3f:45:67:c8:a1:2e: 89:f3:d9:c4:fe:0b:5b:0d:dd:ab:36:8a:7d:01:18:23:f2:8d: 41:1a:02:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUxMTA0MjIzNTA5WhcNMjUxMTExMjIzNTA5WjAYMRYwFAYD VQQDEw02OTBhN2Y5ZS1lMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/d6U0azTPsQxlGmS1XmTYhO62mrFlZr6dSlDDbuTqR+grOOQs92lfKBGbVT w1u3XCxe1PnTm2ramRSXuvUTiRONcIY2lwn8K8egz5NyM9wuIU0jjv00yZynDV53 GBE+1sqMfEH76MbuHAntYvvDrQhnu/zO0nPcUZ33ZQ7wJJIS5snCxwom3oNfu2Lr f9i2QVjjfr5ZcImGjTPVi3wtzkzJtXDx+O7RxUCWHS9ZAVJRp5egetqh0T3WC/oV EmkIBkosXpoy2Wn+L/efqmQFN20DiLWnegvQNGg5DSnj/z7+KdsAlr0Athsd94fc orbnYzs8tXj4MSM0T3pL8ZoDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXhTxVq 2X3a+bWSK5rlrSaenGulMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuj1UY2sEWv/5d48G/IoGF1ZdmfGfT0aIGYepTmcSevpGbOUav7OTS VCoaWTV75q2lyuGOc3nPtkvplaedr+3ZYTL86oThN46nO/t7ks4QpwgHzyELn2TQ oGERsiSmvm9f8vLJk/vOMPKF2+W6sbSEfzP8OMnCBY1USa75Ub+mpJHIUtPX4nW8 15o7GLcsl6nDnuBUolL6Tqa7iVZWDD60Hx6H3szDdQatHmn2gkCUmJZAOrwM3mW/ MuuSVOMTFZUQI5QoSsiu9FQMrhUGKW4zqKRF1YEDXbksl4x+YGa6FSLM3DY/RWfI oS6J89nE/gtbDd2rNop9ARgj8o1BGgI7 -----END CERTIFICATE-----Generated at Wed Nov 5 20:08:37 2025 by rpki-client